Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File:                     8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier:          ZciGc/ueXzP2HYDbqvaZXh+V1CjK3K+uRgPnVMlWboI=
Subject key identifier:   72:28:B9:18:D5:C4:7F:35:F4:13:33:52:B0:58:82:A7:E1:66:8E:3C
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer:       /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial:       018F43B3074A0F2AB63E515A57CC367B6772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number:          05A5
Signing time:             Sat 04 May 2024 13:02:37 +0000
Manifest this update:     Sat 04 May 2024 13:02:37 +0000
Manifest next update:     Sun 05 May 2024 13:02:37 +0000
Files and hashes:         1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: 3XlbgHDCCxxjVAzfBkV1I7mndvrTb9+chFFH7kURKSo=)
                          2: Il_-mS2h5g2nqr5-CBlUmRVV8IU.roa (hash: 0f+jPHZgjfNHT/ukKaqcxpJDOKAo2AGMTvpOcCD4Tek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b3:07:4a:0f:2a:b6:3e:51:5a:57:cc:36:7b:67:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
        Validity
            Not Before: May  4 13:02:37 2024 GMT
            Not After : May  5 13:02:37 2024 GMT
        Subject: CN=7228b918d5c47f35f4133352b05882a7e1668e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:f3:f1:a8:e4:43:39:0c:3c:76:00:19:9c:
                    5d:ba:26:c1:e2:c1:ec:af:78:de:68:3b:57:36:04:
                    3e:c3:50:62:cc:54:c2:23:a5:25:4d:82:50:e8:f1:
                    e9:d9:ad:22:7c:14:06:a2:53:f7:89:b9:cd:14:3b:
                    45:9f:12:69:7d:2a:09:1c:01:78:69:77:62:f6:3f:
                    46:e4:c7:ef:0f:fc:3e:f2:51:f6:28:9f:8d:d9:01:
                    ed:0b:dc:5c:73:b5:c7:4b:bc:46:8c:f9:cb:eb:43:
                    83:f0:27:5c:e5:1d:6b:02:cb:ab:43:c9:d7:20:2e:
                    5e:e2:dd:b5:27:e8:56:52:e0:c6:71:f6:a1:2d:87:
                    7c:e9:23:56:ba:e5:a0:f8:10:20:1d:48:8c:65:85:
                    5e:20:83:aa:af:b0:bd:1f:f9:c1:23:c7:eb:03:9e:
                    90:5a:a2:3e:cf:f0:68:12:3f:d5:42:86:88:5d:1a:
                    d3:ad:92:43:56:23:e0:8a:d4:5a:5e:af:76:d4:5e:
                    4c:af:d8:9a:c7:0e:c0:f0:ca:99:64:55:7f:c9:ce:
                    a8:4e:76:ab:4a:bf:0f:e6:13:1c:bd:d5:e8:64:da:
                    5c:af:f3:40:c7:2e:f2:39:67:9f:67:e7:05:40:c3:
                    f8:d3:44:5c:f4:61:3b:01:0c:11:7e:d5:cb:dd:ae:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:28:B9:18:D5:C4:7F:35:F4:13:33:52:B0:58:82:A7:E1:66:8E:3C
            X509v3 Authority Key Identifier:
                keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d6:92:47:88:f5:8d:56:ce:b5:ba:d7:00:6c:28:4b:31:bc:
         ad:89:d0:1f:c3:58:11:6b:c0:1f:83:9b:d4:c5:e5:f3:40:78:
         c7:54:10:bc:28:95:f9:24:b1:fc:e9:6f:1a:04:5a:91:28:f7:
         c7:d5:30:b8:61:95:f4:3f:fa:4b:6b:dd:19:21:9d:d2:d1:ea:
         0a:82:70:d9:75:58:58:b1:ea:47:0f:c6:fb:ac:ac:f0:2b:5c:
         31:cd:c0:47:e4:87:d4:7c:5d:a5:19:bc:a2:80:92:0d:ed:04:
         09:f1:93:00:5e:1f:98:9f:87:61:f5:56:84:a9:b2:d2:31:ad:
         87:eb:4e:d2:e1:b9:2f:d6:c4:24:62:c0:b1:ee:4d:7d:19:79:
         07:1c:fc:b6:c6:3f:5a:a0:9e:01:11:9d:ac:a0:18:16:51:7a:
         ac:ae:03:97:54:b1:3f:f1:f9:01:94:4c:11:f6:7b:67:01:9c:
         a6:5c:71:2a:23:c7:9b:8e:82:a8:f7:aa:77:17:61:80:d7:4c:
         c7:c6:5e:21:ff:1d:79:36:e6:0a:d1:2f:fc:7c:8c:d5:25:fa:
         21:35:e7:6f:3e:25:89:7b:64:b9:bc:32:cd:8b:79:d5:e7:93:
         f1:b3:d6:c4:c8:7e:9a:99:d6:91:62:06:ce:92:b9:ba:b3:20:
         1b:82:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 17:52:08 2024 by rpki-client on console-ams.rpki-client.org